IBM Security Verify Information Queue 1.0.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*

part: a version: 1.0.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Verify Information Queue (b5986df8-3a32-503d-b68a-1a6b8c3b57e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20412 vulnerable 2026-06-08 05:29:09.226292 Details available
MEDIUM (5.9)
IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192.
Published: 2021-02-12T16:35:31.824Z
Updated: 2024-09-16T23:36:21.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20411 vulnerable 2026-06-08 05:29:09.225906 Details available
HIGH (7.5)
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191.
Published: 2021-02-12T16:35:31.156Z
Updated: 2024-09-16T19:47:15.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20410 vulnerable 2026-06-08 05:29:09.225527 Details available
MEDIUM (5.3)
IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190.
Published: 2021-02-12T16:35:30.481Z
Updated: 2024-09-17T04:14:18.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20409 vulnerable 2026-06-08 05:29:09.225115 IBM Security Verify Information Queue information disclosure
MEDIUM (5.9)
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 196188.
Published: 2021-02-12T16:35:29.866Z
Updated: 2024-09-16T21:57:40.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20408 vulnerable 2026-06-08 05:29:09.224594 Details available
HIGH (7.1)
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187.
Published: 2021-02-12T16:35:29.239Z
Updated: 2024-09-16T22:56:54.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20407 vulnerable 2026-06-08 05:29:09.224218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20406 vulnerable 2026-06-08 05:29:09.223818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20405 vulnerable 2026-06-08 05:29:09.223427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20404 vulnerable 2026-06-08 05:29:09.223066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20403 vulnerable 2026-06-08 05:29:09.222683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20402 vulnerable 2026-06-08 05:29:09.222198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.